The poor state of security on the Internet calls for more effective ways to protect networked systems from attacks. One solution is to be able to counter attack with offensive capabilities. With attacker information available, companies find themselves in a dilemma – counter attack for immediate self-defense, retaliate for future deterrence, inform the appropriate law enforcement authorities, o...

How does diversity affect performance? We develop a theoretical framework in which diversity of prevention employees (protecting the organization from harm) and of promotion employees (advancing positive outcomes) have different effects on individual and organizational performance. We use data for twenty-eight soccer teams and 1723 players that played in 6120 games during ten seasons and find t...

We discuss a reference model for security measures to preserve integrity of information. Unlike traditional approaches which focus on an defensive approach to preserving integrity, we also present offensive measures to stimulate integrity of information, by providing feedback from usage. The reference model is used to analyze the security measures proposed in the design of the Dutch national El...

This paper addresses the problem of identifying player coordination patterns in multi-player adversarial games. In the Rush 2008 football simulator, we observe that each play relies on the efforts of different subgroups within the main team to score team touchdowns. We present a method to automatically identify these subgroups from historical play data based on: 1) mutual information between th...

Offensive security—or, in plain English, the practice of exploitation—has greatly enhanced our understanding of what it means for computers to be trustworthy. Having grown from hacker conventions that fit into a single room into a distinct engineering discipline in all but the name, offensive computing has so far been content with a jargon and an informal “hacker curriculum”. Now that it is unm...